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MONITOR OUTBOUND TRAFFIC 
FOR PRESENCE OF OUTBOUND 
DRONE TRAFFIC 




SEND ALERT TO NETWORK ADMINISTRATOR 



DETERMINE DESTINATION ADDRESS OF 
OUTBOUND DRONE TRAFFIC 



BLOCK OUTBOUND DRONE TRAFFIC 
PROVIDE NOTICE TO CORRELATOR 
FETCH OUTBOUND AND INBOUND TRACE LOGS 
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CORRELATE LOGS TO FIND SOURCE ID 
OF VANDAL 
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SEND ALERT TO NETWORK ADMINISTRATOR 
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BLOCK INCOMING TRAFFIC THAT 
BEARS SOURCE ID OF VANDAL 



